FenixGems.eu Privacy Policy – Information Collection and Use (United Kingdom)

At FenixGems.eu, operating within the United Kingdom, protecting your privacy is our priority. This policy outlines how we collect, use, and safeguard your personal data when you use our website, fenixgems.eu (hereinafter, “the Website”). We are governed by UK data protection laws, including the UK GDPR (United Kingdom General Data Protection Regulation) and the Data Protection Act 2018.

1. What Information Do We Collect?

We collect two types of information:

• Information You Provide Directly:

  • Identification and Contact Details: Your name, email address, phone number, and delivery/billing address – provided when you place an order, create a user account, subscribe to our newsletter, or contact us.
  • Transactional Data: Information related to products purchased, order history, and payment preferences. Please note, we do not store full payment card details; these are securely processed by third-party payment providers.
  • Communication Data: The content of messages you send to us via email or through our contact form.

• Information Collected Automatically:

  • Technical Data: Your IP address, browser type, operating system, internet service provider, timestamps, referring/exit pages, and website navigation data (e.g., pages visited, time spent on pages, elements clicked). This information is gathered via cookies and similar technologies. For more details on cookies, please refer to our Cookie Policy.
  • Device Data: The type of mobile device, unique device identifiers, and mobile device operating system.

2. How Do We Collect and Use Your Information?

We collect and use your personal data for the following purposes:

• Order Fulfilment: Processing and shipping your orders, handling payments, and issuing invoices and confirmations.
• User Account Management: Allowing you to access your order history, manage your address details, and update preferences.
• Customer Support: Responding to your enquiries, complaints, and support requests.
• Marketing and Communication: Sending newsletters, promotional information, new product announcements, and special offers (if you have consented to receive them). You can always opt out of marketing communications at any time.
• Personalising Your Experience: Customising the content and offers displayed on our Website based on your interests and Browse history.
• Analytics and Optimisation: Monitoring and analysing website usage to improve its functionality, product offerings, and overall user experience.
• Fraud Prevention and Abuse: Protecting our interests and the security of our customers.
• Legal Compliance: Adhering to applicable UK laws and regulations, including tax and accounting requirements.

3. Legal Basis for Processing Data

We process your personal data based on the following legal grounds, in accordance with the UK GDPR:

• Contractual Necessity: When processing is necessary for the performance of a contract to which you are a party (e.g., fulfilling your orders, managing your user account).
• Consent: Where you have given explicit consent for specific processing activities, such as sending newsletters and certain cookie usage (where required by law). You have the right to withdraw your consent at any time.
• Legitimate Interests: For analytical, optimisation, fraud prevention, and the establishment or defence of legal claims, where our legitimate interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: When processing is necessary for compliance with a legal obligation to which we are subject under UK law (e.g., tax regulations).

4. Sharing Your Information

Your personal data may be shared with the following categories of recipients, strictly to the extent necessary and for the purposes outlined above:

• Service Providers: Courier and postal companies (for order delivery), payment processors (for transaction handling), IT service providers (e.g., hosting, technical support), and marketing service providers (e.g., newsletter platforms).
• Public Authorities: If required by applicable law, such as by court order or law enforcement agencies in the UK.

We always ensure that our service providers process your personal data in accordance with this privacy policy and applicable UK data protection laws. Should data be transferred outside the EEA/UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or relevant adequacy decisions from the European Commission/UK government.

5. How Long Do We Store Your Data?

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by UK law.

• Order-Related Data: Kept for the period required by tax and accounting regulations (typically 6 years from the end of the financial year in which the transaction occurred in the UK).
• User Account Data: Retained until the user deletes their account or in cases of prolonged inactivity.
• Marketing Data: Held until you withdraw your consent for its processing.
• Automatically Collected Data: Stored according to cookie settings.

6. Your Rights

In accordance with the UK GDPR, you have the following rights regarding your personal data:

• Right of Access: You have the right to obtain confirmation as to whether or not your personal data is being processed, and, where that is the case, access to the personal data and information regarding its processing.
• Right to Rectification: You have the right to request the correction of inaccurate personal data or to have incomplete data completed.
• Right to Erasure (“Right to be Forgotten”): You have the right to request the deletion of your personal data if there is no compelling reason for its continued processing (e.g., the data is no longer necessary for the purposes for which it was collected).
• Right to Restriction of Processing: You have the right to request the restriction of processing your data in certain situations (e.g., when you contest the accuracy of the data).
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data where the processing is based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: If data processing is based on your consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint with the Supervisory Authority: If you believe that the processing of your data violates UK GDPR, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) – the UK’s data protection supervisory authority.

To exercise any of the above rights, please contact us using the details provided in the “Contact” section.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or alteration. These include data encryption (SSL/TLS), network security, regular backups, and restricting access to personal data to authorised personnel only.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or applicable regulations. Any changes will be published on this page. We encourage you to review this page regularly to stay informed about our current policy.

9. Contact

If you have any questions about this Privacy Policy or how we process your personal data, please contact us:

FenixGems.eu [Your Email Address, e.g., info@fenixgems.eu] [Your Phone Number, if you wish to provide it – ensure it includes the UK country code] [Optional: Your UK mailing address, if you have a physical office/headquarters]

FenixGems.eu Service Providers

At FenixGems.eu, to ensure the high quality of our services and efficient order fulfillment, we collaborate with selected external service providers. This section explains who these providers are, what data we share with them, and for what purpose.

What are Service Providers?

Service Providers are external entities with whom we enter into agreements to perform specific tasks or provide services on our behalf. Thanks to their specialised knowledge and infrastructure, we can efficiently operate our online store, process transactions, deliver products, and provide support.

Which Service Providers Do We Use and Why Do We Share Data with Them?

We share personal data with our Service Providers only to the extent necessary and for the purpose of carrying out specific tasks, in accordance with our Privacy Policy and applicable data protection laws (including GDPR).

Here are the categories of Service Providers we work with:

1. Payment Service Providers:

   • Purpose: To process payments for your orders. When you make a purchase, your payment details (e.g., credit/debit card information, bank account details) are securely transmitted directly to these providers for transaction authorization and processing.
   • Examples of data shared: Transaction amount, currency, order ID. FenixGems.eu never stores your full payment card details.
   • Examples (possible): Stripe, PayPal.

2. Courier and Postal Service Providers:

   • Purpose: To deliver purchased products to your specified address.
   • Examples of data shared: First name, last name, delivery address, phone number (optional, for courier contact), shipment contents (product name).
   • Examples (possible): DPD, InPost, Royal Mail, UPS, DHL.

3. Hosting and IT Infrastructure Service Providers:

   • Purpose: To ensure the functioning of our Website, store store data, databases, graphic files, etc. They are responsible for the stability and technical security of our platform.
   • Examples of data shared: Data stored in the store’s database (e.g., user account information, orders).
   • Examples (possible): Local or international hosting providers.

4. Analytical Service Providers:

   • Purpose: To measure and analyse website traffic, user behaviour, and the effectiveness of marketing campaigns. Data is typically anonymised or aggregated.
   • Examples of data shared (usually anonymous): IP address (often anonymised), browser and device data, pages visited, time spent on the page.
   • Examples (possible): Google Analytics.

5. Marketing and Advertising Service Providers:

   • Purpose: To manage marketing campaigns, send newsletters, conduct remarketing, and display personalised advertisements.
   • Examples of data shared: Email address (for newsletters), data on website interactions (for remarketing, often via cookies and pixels).
   • Examples (possible): Mailchimp, Facebook Ads, Google Ads.

6. Customer Service / Communication Service Providers:

   • Purpose: To support communication with you, e.g., via live chat, ticketing systems, or email management.
   • Examples of data shared: Your contact details and the content of your correspondence.
   • Examples (possible): Live chat systems, helpdesk systems.

Security and Compliance

Before engaging with any Service Provider, we carefully review their privacy policy and security measures. For every Service Provider who processes personal data on our behalf, we enter into a relevant data processing agreement. These agreements ensure that Service Providers process your data in accordance with applicable data protection laws (such as GDPR) and solely for the purposes specified by FenixGems.eu.

We ensure that any data transfers outside the European Economic Area (EEA) are carried out only with appropriate safeguards, such as standard contractual clauses or binding corporate rules, to guarantee an adequate level of data protection.

Contact

If you have any questions regarding our Service Providers or how we process your personal data, please contact us using the details provided in our Privacy Policy.